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Top Stories 

• Sysco Corporation entered into an agreement with the State of California and will pay 
$19.4 million in restitution settle reports that the company stored over 400,000 meat, 
produce, and dairy products in unsafe conditions. - Food Poisoning Bulletin (See item 11) 

• Crews reached 75 percent containment July 21 of the Buzzard Complex series of fires after 
it burned 396,000 acres in Oregon. - KGW 8 Portland; Associated Press (See item 16) 

• Police are searching for two masked robbers that stole over $180,000 from the Caesars 
Atlantic City casino in New Jersey July 21. - WCAU 10 Philadelphia (See item 22) 

• Authorities are investigating the cause of a 3-alarm fire that damaged or destroyed 35 units 
and affected 15 more at a Houston apartment complex July 21, displacing up to 135 
residents. - KPRC 2 Houston (See item 24) 
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Energy Sector 



1. July 22, Associated Press - (North Dakota) Fire burns in industrial part of North 
Dakota town. A July 22 fire at the Red River Supply in the town of Williston 
prompted authorities to set up an evacuation zone with a half-mile radius and caused a 
stretch of State Highway 1804 to close while emergency personnel assessed the 
damage. 

Source: http://www.chron.com/news/science/article/Williston-industrial-fire-shuts- 
do wn-state -highway-5 63 7 609 .php 

For additional stories, see items 7, 9, and 21 
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Chemical Industry Sector 

See item 21 



T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

See item 21 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

2. July 22, Securityweek - (International) Attackers bypass 2FA systems used by banks 
in ‘Operation Emmental’. Researchers with Trend Micro released a report July 22 
detailing a cybercrime campaign targeting banks in Europe and Japan dubbed 
“Operation Emmental” that uses computer and Android mobile device malware to steal 
users’ banking credentials and two-factor authentication (2FA) tokens. The malware 
used in the campaign can install fake Secure Sockets Layer (SSL) certificates, delete 
itself after use, and perform other actions to trick users. 
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Source: http://www.securityweek.com/attackers-bvpass-2fa-svstems-used-banks- 
operation-emmental 



3. July 21, Krebs on Security - (National) Banks: Card breach at Goodwill Industries. 
Goodwill Industries stated that it is working with the U.S. Secret Service to investigate 
a possible breach of payment card data from some of its U.S. stores. The company 
stated that it became aware of a possible breach July 18 after they were contacted by a 
payment card industry fraud investigation unit and federal authorities. 

Source: http://krebsonsecuritv.com/2014/07/banks-card-breach-at-goodwill-industries/ 

4. July 21, KVTK 3 Phoenix - (California) 147 fraudulent debit, credit cards seized; 2 
people arrested. Two people were arrested July 21 in Blythe, California, by Yuma 
Sector Border Patrol agents after 147 fraudulent debit and pre-paid cards were found 
during a vehicle stop. 

Source: http ://www. azfamily.com/ne w s/ 1 47 -fraudulent-debit-credit-cards- seized-2- 
people-arrested-2679927 6 1 .htrnl 

5. July 21, NextGov - (National) Significant deficiencies found in Treasury’s computer 
security. Two reports by the Government Accountability Office released the week of 
July 14 found new computer security vulnerabilities at the U.S. Department of the 
Treasury’s Bureau of Fiscal Service and existing security issues at the Federal Deposit 
Insurance Corporation that remain unaddressed from 2012 which could compromise 
reporting efficiency or the security of data. 

Source: http://www.nextgov.com/cybersecuritv/2014/07/significant-deficiencies-found- 
treasurys-computer-security/89144/ 
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Transportation Systems Sector 

6. July 22, Associated Press - (International) US Airlines scrap Israel flights over 
missile fear. Delta Air Lines and United Airlines cancelled all flights to Israel until 
further notice July 22 due to safety and security concerns after reports that a rocket 
landed near Tel Aviv Ben Gurion Airport. US Airways also cancelled a flight from 
Philadelphia headed to Tel Aviv as a precaution. 

Source: http ://abcnew s . go .com/Health/wireStory/delta-cancels-israel-fli ghts-mis sile- 
fear-24663136 

7. July 22, New 12 Westchester - (New York) 2,000 gallons of oil spills in Woodbury 
crash. Route 6 and Route 293 in Woodbury, New York, were closed for several hours 
July 21 after a semi-truck collided with another vehicle and flipped over westbound 
Route 6 spilling about 2,000 gallons of oil. 

Source: http://westchester.newsl2.com/news/2-000-gallons-of-oil-spills-in-woodbury- 
crash-1.8863150 

8. July 21, WVEC 13 Hampton - (Virginia) Tanker truck misses turn; ends up in ditch, 
causing major traffic woes. Eastbound lanes of U.S. Route 58 near Chesapeake, 
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Virginia, were closed for 7 hours July 21 when a semi-truck carrying 5,500 gallons of 
gasoline and 2,000 gallons of diesel crashed into a ditch. There was no spillage and 
officials spent several hours pulling the semi-truck out of the ditch and transferring the 
gasoline and diesel to another semi-truck. 

Source: http://www.wvec.com/news/local/Tanker-truck-misses-turn-ends-up-in-ditch- 
causing-maior-traffic-woes-26803398 1 .html 

9. July 19, WBZ 4 Boston - (Massachusetts) Hot air balloon crashes into power lines in 
Clinton; several injured. A Colt Balloon-owned hot air balloon crashed into a power 
line in Clinton, Massachusetts, July 19 while attempting to land, injuring five people. 
The accident also caused approximately 600 National Grid customers to lose power for 
several hours. 

Source: http://boston.cbslocal.com/2014/07/19/hot-air-balloon-crashes-into-power- 
lines-in-clinton/ 



For another story, see item 1 
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Food and Agriculture Sector 

10. July 21, U.S. Food and Drug Administration - (National) FDA consumer advice on 
powdered pure caffeine. The U.S. Food and Drug Administration issued a warning 
July 21 advising against the consumption of powdered pure caffeine sold in bulk bags 
over the Internet due to the high potency of the product that can result in accidental 
overdose. At least one death has been linked to the product. 

Source: 

http://www.fda.gov/Food/RecallsQutbreaksEmergencies/SafetvAlertsAdvisories/ucm4 

05787.htm 



11. July 20, Food Poisoning Bulletin - (California) Sysco pays $19.4 million for 
dangerous food storage practices. Sysco Corporation entered into an agreement with 
the State of California and will pay $19.4 million in restitution settle reports that the 
company stored over 400,000 meat, produce, and dairy products in unsafe conditions, 
including unrefrigerated and dirty storage units, between July 2009 and August 2013. 
An investigation by health officials also revealed that the products were delivered to 
restaurants, hospitals, and schools in unrefrigerated cars, and there were 25 
unregistered and unrefrigerated drop sites from Sacramento to San Diego. 

Source: http://foodpoisoningbulletin.com/2014/svsco-pavs-19-4-million-for-dangerous- 
food- storage-practices/ 

12. July 18, Food Poisoning Bulletin - (National) Salmonella outbreak linked to chia 
powder grows to 25. The U.S. Centers for Disease Control and Prevention reported 
that as of July 14 a total of 25 individuals in 15 States have been sickened by a 
Salmonella outbreak linked to organic sprouted chia powder. Officials stated that the 
individuals were infected with three strains of the bacteria, including Salmonella 
Newport, Salmonella Hartford, and Salmonella Oranienburg. 



- 4 - 



Source: http://foodpoisoningbulletin.com/2014/salmonella-outbreak-linked-to-chia- 
powder-grows-to-25/ 



13. July 18, Associated Press - (Wisconsin) Seven more counties added to emerald ash 
borer quarantine. The Wisconsin Department of Agriculture expanded the State’s 
emerald ash borer quarantine July 18 to include 7 additional counties, bringing the total 
number of counties under quarantine to 29. Officials discovered the insect in 3 of the 
counties that were added to the quarantine, which limits the transport of firewood and 
requires wood handling businesses to consult State officials for an inspection of 
products prior to shipment. 

Source: http://fox6now.com/2014/Q7/18/update-seven-more-counties-added-to- 
emerald- ash-borer-q u arantine/ 
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Water and Wastewater Systems Sector 

14. July 22, Fayetteville Observer - (North Carolina) 3,500 gallons of wastewater spill 
into Thornton Creek Monday. A power outage July 21 prompted 3,500 gallons of 
wastewater to spill into Thornton Creek in Lillington due to an overflow of diluted 
wastewater at a sewer lift station. Authorities started pump and haul procedures and 
applied lime. 

Source: http://www.favobserver.com/news/local/gallons-of-wastewater-spill-into- 
thornton-creek-monday/article 5ee2441d-db2d-5707-9189-a4110b68ce4d.html 

For another story, see item 21 
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Healthcare and Public Health Sector 

15. July 21, SC Magazine - (California) Thousands had data on computers stolen from 
California medical office. The California office of the Bay Area Pain Medical 
Associates notified about 2,780 patients July 10 that their personal information may 
have been accessed after three desktop computers were stolen May 19. The computers 
held spreadsheets containing patients’ personal information. 

Source: http://www.scmagazine.com/thousands-had-data-on-computers-stolen-from- 
california-medical-office/article/36 1 852/ 
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Government Facilities Sector 

16. July 21, KGW 8 Portland; Associated Press - (Oregon) Oregon’s largest fire complex 
396,000 acres. Crews reached 75 percent containment July 21 of the Buzzard Complex 
after burning 396,000 acres in Oregon. Fire departments worked to contain several 
other complex fires in the State that combined burned more than 200,000 acres by July 
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20 . 

Source: http://www.kgw.com/news/Largest-Qregon-wildfire-burning-nearly-400000- 
acres-26796221 l.html 



17. July 21, Associated Press - (Washington) Better weather aiding Washington 
wildfire fight. Fire crews reached 2 percent containment July 21 of the Carlton 
Complex of fires which burned 243,000 acres in north-central Washington. About 150 
homes were destroyed and one person died of an apparent heart attack while fighting 
the fire near his home. 

Source: http://www.sfgate.com/news/us/article/Better-weather-to-aid-in-Wash-wildfire- 
fight-5634876.php 

18. July 21, Merced Sun-Star - (California) Merced Superior Court and jail evacuated 
for bomb threat. The Merced Superior Court in California was evacuated for more 
than 3 hours July 21 after the county’s main jail received a call from an individual 
threatening to blow up the old and new courthouses as well as the main jail. Officials 
cleared the scene after searching the building and continue to investigate the incident. 
Source: http://www.mercedsunstar.com/2014/07/21/3757666/merced-county-superior- 
court-evacuated.html 



For another story, see item 5 
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Emergency Services Sector 

19. July 21, WUSA 9 Washington, D.C. - (Maryland) Coast Guard: Suspect makes 11 
false distress calls. The U.S. Coast Guard is searching for a suspect that made 11 false 
distress calls in June and July from the Seneca Creek area in Baltimore. The total cost 
for the searches was estimated at $15,000 and a $2,000 reward is being offered in the 
case. 

Source: http://www.wusa9.com/storv/news/local/maryland/2014/07/21/suspect-wanted- 
seneca-creek-hoax-calls/ 1 296042 1 / 



For another story, see item 18 
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Information Technology Sector 

20. July 22, Securityweek - (International) iOS backdoors expose personal data: 
Researcher. A security researcher presenting at a security conference reported that 
Apple’s iOS mobile operating system contains several undocumented services which 
could be used in some circumstances to access email, location data, media, and other 
personal data. Apple stated that the services are used for diagnostic purposes and can 
only be used to access data with user approval. 

Source: http://www.securitvweek.com/ios-backdoors-expose-personal-data-researcher 
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21. July 21, V3.co.uk - (International) Fresh threat to critical infrastructure found in 
Havex malware. Researchers at FireEye analyzed a variant of the Havex malware (also 
known as Fertger or Peacepipe) and found that it contained an open-platform 
communication (OPC) scanner that could be used to target supervisory control and data 
acquisition (SCADA) systems used by several industries, including power plants and 
water utilities. 

Source: http://www.v3.co.uk/v3-uk/news/2356410/fresh-threat-to-critical- 
infrastructure-found-in-havex-malware 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

22. July 22, WCAU 10 Philadelphia - (New Jersey) Masked robbers steal over $180K 
from Caesars casino. Police are searching for two masked robbers that stole over 
$180,000 from the Caesars Atlantic City casino in New Jersey July 21 when at least 
one suspect brandished a gun and both individuals stole two plastic cash boxes holding 
the money. 

Source: http://www.nbcphiladelphia.com/news/local/Masked-Robbers-Steal-Over- 
1 80K-From-Caesars-Casino-26802733 1 .html 

23. July 21, KTVK 3 Phoenix - (Arizona) Suspect arrested in deadly Glendale shooting. 
Police arrested a suspect who allegedly opened fire during an altercation at a Glendale 
apartment complex July 20, killing one person and injuring a second individual. 
Officials are investigating the incident. 

Source: http://www.azfamily.com/news/Police-ID-l-victim-suspect-in-deadly- 
shooting-at-Glendale-apartment-complex-26798935 1 .html 

24. July 21, KPRC 2 Houston - (Texas) Dozens displaced after 3-alarm apartment fire 
in northwest Houston. Authorities are investigating the cause of a 3-alarm fire that 
damaged or destroyed 35 units and affected 15 more at a Houston apartment complex 
July 21. No injuries were reported and up to 135 residents were displaced by the blaze. 
Source: http://www.click2houston.com/news/breaking-3alarm-apartment-fire-in- 
northwest-houston/27052920 
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25. July 21, Associated Press - (Florida) Second finger injury reported on Disney 
World ride. A report made public by the Florida Department of Agriculture and 
Consumer Services July 21 stated that a child suffered lacerations to four fingers while 
on Walt Disney World’s Pirates of the Caribbean ride in Lake Buena Vista during 
April. Disney officials are no longer loading guests into the back row of the ride due to 
a similar incident in July that resulted in a guest losing two fingertips. 

Source: http://www.foxnews.com/us/2014/07/21/second-finger-iniury-reported-on- 
disney- world-ride/ 

26. July 21, U.S. Department of Labor - (Ohio) US Labor Department's OSHA cites 
Ohio Lowe's for repeat electrical hazards. Lowe’s Cos. Inc., was cited by the 
Occupational Safety and Health Administration for five repeat and one serious 
workplace safety violations after a March 2014 inspection of the company’s Zanesvile 
store revealed that workers were exposed to electrical hazards and were not provided 
information on respiratory protection. Proposed penalties total $53,240. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26421 

27. July 18, Fairbanks Daily News-Miner - (Alaska) Fairbanks police: Man allegedly set 
Geraghty apartment fire to cover up murder. A Fairbanks teen was indicted July 18 
on allegations that he set a fire to a Geraghty apartment building in January to cover up 
a murder that he committed. A second resident was killed and 50 residents were 
displaced by the blaze. 

Source: http://www.newsminer.com/news/local news/fairbanks-police-man-allegedly- 
set-geraghty-apartment-fire-to-cover/article clf4403e-0d82-lle4-92bd- 
0017a43b2370.html 



For another story, see item 3 
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Dams Sector 

28. July 22, Associated Press - (New York) Recreational projects funded for 
Adirondacks. The governor of New York announced July 22 that several towns in the 
Adirondacks area will receive funding to expand and improve outdoor recreation 
including a $750,000 project to repair and upgrade of Lake Abanakee Dam along the 
Indian River to bring the dam in compliance with State safety regulations. 

Source: http://www.seattlepi.com/news/article/Recreational-proiects-funded-for- 
Adirondacks-5637159.php 

29. July 21, Buffalo News - (New York) Herbicide treatments begin Tuesday in Erie 
Canal. Temporary restrictions on use of treated water. The U.S. Army Corps of 
Engineers began treating a 7-mile stretch of the Erie Canal in North Tonawanda July 22 
to address the aggressive aquatic plant, hydrilla, and will initiate application restrictions 
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for 48 hours, along with other restrictions for the canal. 

Source: httD://www.buffalonews.com/city-region/north-tonawanda/herbicide- 

treatments-begin-tuesday-in-erie-canal-temnorary-restrictions-on-use-of-treated-water- 

20140721 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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